Identity authentication method and device and storage medium

Abstract

The invention discloses an identity authentication method and device and a storage medium. The method comprises the following steps: collecting static biological information and first voice information of a user; the first voice information is collected when a user reads first text information displayed by a client; verifying whether the static biological information is the same as pre-stored biological information stored in the terminal by the client to obtain a verification result; judging whether second text information corresponding to the first voice information is consistent with the first text information or not, and if yes, signing the first voice information and the verification result by using a user private key of the user to obtain signature data; and sending user identity data carrying the verification result, the first voice information and the signature data to a server, so that the server determines the similarity between a voiceprint feature in the first voice information and a pre-stored voiceprint feature after verifying the signature data by using a user public key corresponding to the user private key, and sends the first voice information to the server according to the similarity and the verification result. And authenticating the identity of the user.

Description

Technical Field

[0001] The present invention relates to the field of security technology, and in particular to an identity authentication method, device and storage medium. Background Art

[0002] With the rapid development of mobile Internet, smartphones have become an indispensable part of our lives. They have not only changed the way we communicate, but also penetrated into many fields such as payment, social networking, and work.

[0003] However, the popularity of smartphones also brings challenges in security and privacy protection, especially in sensitive applications such as mobile payments, where identity authentication and access control become particularly important.

[0004] At present, there are many methods of identity authentication, including: account-password-based authentication, biometric-based authentication, and traditional public key infrastructure (PKI) authentication system authentication. Among them, the account-password-based authentication method faces the risk of being cracked by brute force in the context of the current increasing computing power, and has been gradually eliminated; while the biometric-based authentication method, although it ensures the uniqueness of the identity, has low data privacy and security, and must be improved by other means; the traditional PKI system authentication method needs to rely on a third-party certificate authority (CA), and needs to create a digital certificate for each end user. There are a large number of complex certificate exchange and verification processes, which makes certificate issuance and management very complicated, with high equipment costs and low authentication efficiency.

[0005] In view of this, how to conduct efficient and secure identity authentication while reducing user costs has become a technical problem that needs to be solved urgently. Summary of the invention

[0006] The present invention provides an identity authentication method, device and storage medium, which are used to solve the technical problems of low efficiency and insufficient security of identity cards in the prior art.

[0007] In the first aspect, in order to solve the above technical problems, an embodiment of the present invention provides an identity authentication method, which is applied to a client, and the client is deployed on a terminal. The technical solution of the method is as follows:

[0008] Collecting static biometric information and first voice information of the user; wherein the static biometric information is used to characterize the biometric features of the user that exist and will not change; and the first voice information is collected when the user reads aloud the first text information displayed by the client;

[0009] Verifying whether the static biometric information is identical to the pre-stored biometric information stored in the terminal by the client, and obtaining a verification result;

[0010] Determine whether the second text information corresponding to the first voice information is consistent with the first text information, and if they are consistent, use the user private key of the user to sign the first voice information and the verification result to obtain signature data;

[0011] The user identity data carrying the verification result, the first voice information and the signature data is sent to the server, so that the server verifies the signature data using the user public key corresponding to the user private key, determines the similarity between the voiceprint feature in the first voice information and the pre-stored voiceprint feature, and authenticates the identity of the user based on the similarity and the verification result.

[0012] In a possible implementation manner, before obtaining the signature data, the method further includes:

[0013] After the user logs in to the client, detecting whether the terminal supports biometric authentication;

[0014] If it is determined that the terminal supports biometric authentication, encrypt and calculate the unique identifier of the terminal and the unique identifier of the user through the SM3 algorithm to obtain and store the user identifier of the user; the unique identifier of the user is generated by the server based on the identity information provided by the user during registration;

[0015] The session key, the random number and the user identifier used by the client to communicate with the server are encrypted with the master public key to obtain the first ciphertext information; wherein the session key is a symmetric key generated by the client based on the random number; the master public key is a key issued by the server to all users;

[0016] Sending a private key distribution request carrying the user identifier and the first ciphertext information to the server; the private key distribution request is used to request the server to distribute the user private key to the user;

[0017] Receiving second ciphertext information sent by the server; wherein the second ciphertext information is obtained by the server encrypting the user private key and the random number with the session key;

[0018] Decrypt the second ciphertext information using the session key to obtain a decrypted random number and the user private key;

[0019] Determine whether the decrypted random number is the same as the random number stored locally, and if they are the same, store the user private key.

[0020] In a possible implementation manner, after storing the user private key, the method further includes:

[0021] Displaying third text information to the user;

[0022] collecting second voice information when the user reads aloud the third text information;

[0023] determining whether the fourth text information recognized from the second voice information is the same as the third text information;

[0024] If they are the same, the second voice information is sent to the server, so that the server extracts the voiceprint feature from the second voice information as the pre-stored voiceprint feature.

[0025] In a second aspect, an embodiment of the present invention provides an identity authentication method, which is applied to a server, and the method includes:

[0026] Receive user identity data sent by a client; wherein the user identity data carries the verification result of the static biometric information of the user verified by the client, the first voice information of the user, and the signature data; the static biometric information is used to characterize the biometric features of the user that exist and will not change; the first voice information is collected when the user reads aloud the first text information displayed by the client, and the second text information recognized from the first voice information is consistent with the first text information; the signature data is obtained by the client signing the verification result of the first voice information and the static biometric information with the user's private key;

[0027] Verify the signature data using the user public key corresponding to the user private key to determine whether the user identity data has been tampered with;

[0028] If the signature data is verified, it is determined that the user identity data has not been tampered with, and a voiceprint feature is extracted from the first voice information;

[0029] Calculating the similarity between the voiceprint feature of the first voice information and the pre-stored voiceprint feature;

[0030] If the similarity is greater than a preset value and the verification result of the static biometric information is passed, it is determined that the identity of the user is authenticated.

[0031] In a possible implementation manner, before receiving the user identity data sent by the client, the method further includes:

[0032] Receive a private key distribution request sent by the client; wherein the private key distribution request carries the user identification and first ciphertext information of the user, wherein the user identification is obtained by encrypting and calculating the unique identification of the terminal and the unique identification of the user through the SM3 algorithm after the client determines that the terminal supports biometric authentication; the unique identification of the user is generated by the server based on the identity information provided by the user when registering; the first ciphertext information is obtained by the client using the master public key to encrypt the session key, random number and user identification used for communication between the client and the server; the session key is a symmetric key generated by the client based on the random number; the master public key is a key issued by the server to all users;

[0033] Decrypt the first ciphertext information using a master private key corresponding to the master public key to obtain the session key, the random number and the decrypted user identifier;

[0034] Determine whether the user identification is the same as the decrypted user identification, and if so, generate the user private key based on the user identification and the configuration parameters of the server; wherein the configuration parameters are used to characterize the environmental characteristics of the server;

[0035] Encrypt the user private key and the random number using the session key to obtain second ciphertext information;

[0036] The second ciphertext information is sent to the client.

[0037] In a possible implementation manner, after sending the second ciphertext information to the client, the method further includes:

[0038] receiving a second voice message sent by the client; wherein the second voice message is collected by the client when the user reads aloud the third text message displayed by the client, and the fourth text message recognized from the second voice message is the same as the third text message;

[0039] A voiceprint feature is extracted from the second voice information and stored in the server as a pre-stored biometric feature of the user.

[0040] In a third aspect, an embodiment of the present invention provides an identity authentication device, which is applied to a client, and the client is deployed on a terminal, and the device includes:

[0041] A collection unit, configured to collect static biometric information and first voice information of a user; wherein the static biometric information is used to characterize a biometric feature of the user that exists and will not change; and the first voice information is collected when the user reads aloud the first text information displayed by the client;

[0042] a verification unit, used to verify whether the static biometric information is identical to the pre-stored biometric information stored in the terminal by the client, and obtain a verification result;

[0043] a processing unit, configured to determine whether the second text information corresponding to the first voice information is consistent with the first text information, and if consistent, to sign the first voice information and the verification result with the user's private key to obtain signature data;

[0044] The sending unit is used to send the user identity data carrying the verification result, the first voice information and the signature data to the server, so that the server uses the user public key corresponding to the user private key to verify the signature data, determine the similarity between the voiceprint feature in the first voice information and the pre-stored voiceprint feature, and authenticate the identity of the user based on the similarity and the verification result.

[0045] In a possible implementation manner, the processing unit is further configured to:

[0046] Before obtaining the signature data, after the user logs into the client, detecting whether the terminal supports biometric authentication;

[0047] If it is determined that the terminal supports biometric authentication, encrypt and calculate the unique identifier of the terminal and the unique identifier of the user through the SM3 algorithm to obtain and store the user identifier of the user; the unique identifier of the user is generated by the server based on the identity information provided by the user during registration;

[0048] The session key, the random number and the user identifier used by the client to communicate with the server are encrypted with the master public key to obtain the first ciphertext information; wherein the session key is a symmetric key generated by the client based on the random number; the master public key is a key issued by the server to all users;

[0049] Sending a private key distribution request carrying the user identifier and the first ciphertext information to the server; the private key distribution request is used to request the server to distribute the user private key to the user;

[0050] Receiving second ciphertext information sent by the server; wherein the second ciphertext information is obtained by the server encrypting the user private key and the random number with the session key;

[0051] Decrypt the second ciphertext information using the session key to obtain a decrypted random number and the user private key;

[0052] Determine whether the decrypted random number is the same as the random number stored locally, and if they are the same, store the user private key.

[0053] In a possible implementation manner, the processing unit is further configured to:

[0054] After storing the user private key, displaying third text information to the user;

[0055] collecting second voice information when the user reads aloud the third text information;

[0056] determining whether the fourth text information recognized from the second voice information is the same as the third text information;

[0057] If they are the same, the second voice information is sent to the server, so that the server extracts the voiceprint feature from the second voice information as the pre-stored voiceprint feature.

[0058] In a fourth aspect, an embodiment of the present invention provides an identity authentication device, which is applied to a server, and the device includes:

[0059] A receiving unit, configured to receive user identity data sent by a client; wherein the user identity data carries a verification result of the static biometric information of the user verified by the client, the first voice information of the user, and signature data; the static biometric information is used to characterize a biometric feature of the user that exists and will not change; the first voice information is collected when the user reads aloud the first text information displayed by the client, and the second text information recognized from the first voice information is consistent with the first text information; the signature data is obtained by the client signing the verification result of the first voice information and the static biometric information with the user's private key;

[0060] a signature verification unit, configured to verify the signature data using a user public key corresponding to the user private key to determine whether the user identity data has been tampered with; if the signature data passes the signature verification, it is determined that the user identity data has not been tampered with, and a voiceprint feature is extracted from the first voice information;

[0061] The authentication unit is used to calculate the similarity between the voiceprint feature of the first voice information and the pre-stored voiceprint feature; if the similarity is greater than a preset value and the verification result of the static biometric information is passed, it is determined that the identity of the user has passed the authentication.

[0062] In a possible implementation manner, the device further includes a private key distribution unit, and the private key distribution unit is used to:

[0063] Before receiving the user identity data sent by the client, a private key distribution request sent by the client is received; wherein the private key distribution request carries the user identification and first ciphertext information of the user, wherein the user identification is obtained by encrypting and calculating the unique identification of the terminal and the unique identification of the user through the SM3 algorithm after the client determines that the terminal supports biometric authentication; the unique identification of the user is generated by the server based on the identity information provided by the user when registering; the first ciphertext information is obtained by the client using the master public key to encrypt the session key, random number and user identification used for communication between the client and the server; the session key is a symmetric key generated by the client based on the random number; the master public key is a key issued by the server to all users;

[0064] Decrypt the first ciphertext information using a master private key corresponding to the master public key to obtain the session key, the random number and the decrypted user identifier;

[0065] Determine whether the user identification is the same as the decrypted user identification, and if so, generate the user private key based on the user identification and the configuration parameters of the server; wherein the configuration parameters are used to characterize the environmental characteristics of the server;

[0066] Encrypt the user private key and the random number using the session key to obtain second ciphertext information;

[0067] The second ciphertext information is sent to the client.

[0068] In a possible implementation manner, the private key distribution unit is further used for:

[0069] After sending the second ciphertext information to the client, receiving a second voice message sent by the client; wherein the second voice message is collected by the client when the user reads aloud the third text message displayed by the client, and the fourth text message recognized from the second voice message is the same as the third text message;

[0070] A voiceprint feature is extracted from the second voice information and stored in the server as a pre-stored biometric feature of the user.

[0071] In a fifth aspect, an embodiment of the present invention further provides an identity authentication device, including:

[0072] at least one processor, and

[0073] a memory coupled to the at least one processor;

[0074] The memory stores instructions that can be executed by the at least one processor, and the at least one processor executes the method as described in the first aspect or the second aspect above by executing the instructions stored in the memory.

[0075] In a sixth aspect, an embodiment of the present invention further provides a readable storage medium, including:

[0076] Memory,

[0077] The memory is used to store instructions. When the instructions are executed by the processor, the device including the readable storage medium performs the method described in the first aspect or the second aspect above.

[0078] Through the technical solutions in one or more of the above embodiments of the embodiments of the present invention, the embodiments of the present invention have at least the following technical effects:

[0079] In the embodiment provided by the present invention, since the static biometric information is a biometric feature that exists in the user itself and will not change, it has unique certainty, and the first voice information collected at the same time is collected by letting the user correctly read the first text information displayed on the client, it can ensure that the static biometric information and the first voice information are from the same person and are a living biological body; when authenticating the user, the static biometric information verification is completed on the client, and the voiceprint information authentication of the first voice information is completed on the server, and the authentication results of the two are combined to authenticate the user's identity, thereby realizing the use of multiple biometric features (voiceprint is also a biometric feature) authentication, greatly improving the security factor of authentication, ensuring the real-time and reliability of the authentication result, and since the static biometric information is authenticated on the client side, it can also avoid the leakage of the user's personal privacy data, reduce the amount of data transmission, and improve the verification efficiency. BRIEF DESCRIPTION OF THE DRAWINGS

[0080] Figure 1 A flowchart of a client-side identity authentication method provided by an embodiment of the present invention;

[0081] Figure 2 A schematic diagram of account login provided by an embodiment of the present invention;

[0082] Figure 3 A schematic diagram of distributing a user private key provided by an embodiment of the present invention;

[0083] Figure 4 A flow chart of a server-side identity authentication method provided by an embodiment of the present invention;

[0084] Figure 5 A schematic diagram of the interaction of user identity authentication provided by an embodiment of the present invention;

[0085] Figure 6A schematic diagram of the structure of a client-side identity authentication device provided by an embodiment of the present invention;

[0086] Figure 7 A schematic diagram of the structure of a server-side identity authentication device provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0087] The embodiments of the present invention provide a method, device and storage medium for identity authentication, so as to solve the technical problems of low efficiency and insufficient security of identity cards in the prior art.

[0088] In order to better understand the above technical scheme, the technical scheme of the present invention is described in detail below through the accompanying drawings and specific embodiments. It should be understood that the embodiments of the present invention and the specific features in the embodiments are detailed descriptions of the technical scheme of the present invention, rather than limitations on the technical scheme of the present invention. In the absence of conflict, the embodiments of the present invention and the technical features in the embodiments can be combined with each other.

[0089] Please refer to Figure 1 An embodiment of the present invention provides an identity authentication method, which is applied to a client, and the client is deployed in a terminal. The processing process of the method is as follows.

[0090] Step 101: collecting static biometric information and first voice information of the user; wherein the static biometric information is used to represent the biometric features of the user that exist and will not change; the first voice information is collected when the user reads aloud the first text information displayed by the client;

[0091] Static biometric information can be fingerprint information, face information, or other information that exists in the user and does not change. Of course, no change is relative. For example, as people age, their faces will change, but this change process is very slow and can be considered unchanged for a period of time.

[0092] The client can collect face information through the camera in the terminal, and can also collect fingerprint information through the fingerprint sensor in the terminal.

[0093] Before collecting the first voice information, the client can display the first text information to the user, let the user read the first text information, and collect the voice of reading the first text information to obtain the first voice information. The first text information can be randomly generated by the client, or randomly generated by the server and sent to the client, without specific limitation.

[0094] After the user's static biometric information and the first voice information are collected, step 102 and step 103 may be executed.

[0095] Step 102: Verify whether the static biometric information is identical to the pre-stored biometric information stored in the terminal by the client, and obtain a verification result;

[0096] When a user registers on the client, the client will collect the user's static biometric information and store it in the security zone of the terminal. The static biometric information stored by the client in the security zone of the terminal is the pre-stored static biometric information.

[0097] When authenticating the user, the client uses the static biometric information collected in the above-mentioned pre-stored static biometric information verification step 101 to obtain a verification result; the verification result may be a pass or a fail. In addition to whether the verification is passed, the verification result may also include the authentication type (such as face authentication or fingerprint authentication), authentication token information, etc. The authentication token information is the authentication token information generated by the server for the corresponding business when the user applies to the server for identity authentication through the client.

[0098] Of course, you also need to enable the terminal's biometric authentication function before verification.

[0099] Since static biometric information is a unique attribute of each person, using static biometric information as one of the data credentials for identity authentication and completing biometric authentication locally on the mobile terminal not only ensures the security of personal identity privacy data and avoids the possibility of data leakage, but also ensures the unique certainty of the user.

[0100] Step 103: Determine whether the second text information corresponding to the first voice information is consistent with the first text information. If they are consistent, use the user's private key to sign the first voice information and the verification result to obtain signature data;

[0101] Before obtaining the data signature, you need to obtain the user's private key first, which can be achieved in the following ways:

[0102] After the user logs in to the client, check whether the terminal supports biometric authentication; when the user logs in to the client, he actually logs in to the user's account (the account includes the user name / account number and user password). Please refer to Figure 2The account login schematic diagram provided for the embodiment of the present invention has the following specific implementation process: S10, the client obtains the user name and user password; S11, the client encrypts the user password; S12, the client generates and sends a login request, the login request includes the user name and the password information ciphertext encrypted by the master public key; S13, the server receives the login request, and decrypts the user password from the password information ciphertext with the master private key; S14, the server verifies the user name and user password, specifically, the user name obtained from the login request and the decrypted user password are compared with the locally stored user name and user password; S15, the verification is passed (i.e., the comparison is successful); if the verification is passed, the login success information and the user's unique identifier are returned, and S16 is executed, the information carrying the user's unique identifier is generated, and sent to the client, so that the client executes S17, the verification result is obtained and parsed, the parsing result is the verification success and the user's unique identifier, and the user's unique identifier is stored; if the verification fails, the verification failure information is sent to the client, so that the client executes S17, and the parsing result is the verification failure. Among them, the master public key and the master private key are a pair of keys generated by the server. The master public key is publicly released to all users, and the master private key is stored on the server.

[0103] If it is determined that the terminal supports biometric authentication, the terminal's unique identifier and the user's unique identifier are encrypted and calculated using the SM3 algorithm to obtain and store the user's user identifier; the user's unique identifier is generated by the server based on the identity information provided by the user when registering; the identity information includes the user's mobile phone number, ID number, user name, and password information ciphertext obtained by encrypting the user's password with the master public key. When the user registers, the client sends the above identity information as registration information to the server, and the server uses the SM3 algorithm to calculate a summary of the identity information as the user's unique identifier, and saves the above identity information and the user's unique identifier in a local database. After the user successfully logs in for the first time, the user's unique identifier is sent to the client for storage.

[0104] The session key, random number and user identification used for communication between the client and the server are encrypted with the master public key to obtain the first ciphertext information; wherein the session key is a symmetric key generated by the client based on the random number;

[0105] Sending a private key distribution request carrying the user identification and the first ciphertext information to the server; the private key distribution request is used to request the server to distribute a user private key to the user;

[0106] Receiving the second ciphertext information sent by the server; wherein the second ciphertext information is obtained by encrypting the user private key and the random number by the server using the session key;

[0107] Decrypt the second ciphertext information using the session key to obtain a decrypted random number and a user private key;

[0108] Determine whether the decrypted random number is the same as the locally stored random number. If they are the same, store the user's private key.

[0109] See also Figure 3 A schematic diagram of distributing a user private key provided by an embodiment of the present invention. Since the present invention needs to complete static biometric information authentication on the client side, the terminal deployed by the client supports biometric authentication by default. Figure 3 The decision process will not be described here.

[0110] S20, calculating the user ID;

[0111] The client uses the SM3 algorithm to encrypt and calculate the unique identifier of the terminal and the unique identifier of the user to obtain and store the user identifier.

[0112] S21, obtaining a session key and a random number;

[0113] The client randomly generates a random number and uses the random number to generate a symmetric key as the session key.

[0114] S22, generating first ciphertext information;

[0115] The client uses the master public key to encrypt the session key, random number and user ID used for communication between the client and the server to obtain the first ciphertext information; and sends a private key distribution request carrying the first ciphertext information and the user ID to the server, that is, the client sends the user ID to the server in plain text (directly carried in the private key distribution request) and ciphertext (user ID in the first ciphertext information), and the session key and random number are sent to the server in ciphertext form.

[0116] S23, receiving a private key distribution request;

[0117] The server receives a private key distribution request carrying the first ciphertext information and the user identifier.

[0118] S24, decrypting the first ciphertext information;

[0119] The server uses the master private key to decrypt the first ciphertext information to obtain the decrypted user identification, the decrypted random number, and the decrypted session key.

[0120] S25, verifying the user ID;

[0121] The server uses the decrypted user ID to verify the user ID obtained directly from the private key distribution request (i.e., the plaintext user ID). If the two are consistent, the verification is successful, indicating that the first ciphertext information has not been tampered with, that the decrypted random data is consistent with the random number generated by the client, and that the decrypted user key is consistent with the user key generated by the client.

[0122] S26, generating a user private key;

[0123] The server generates a user private key and a user public key based on the user ID and configuration parameters that characterize the environment characteristics of the server. The user private key is subsequently sent to the client for use, and the user public key is stored locally. This technology of generating a user private key and a user public key based on the user ID is called the identification key technology. The signer (client) can sign the message based on the user private key, related parameters and user ID; the verifier (server) verifies the signature based on the user public key to confirm the authenticity of the signer's identity and the integrity of the data.

[0124] Generating user private keys and user public keys based on user identification allows the communicating parties to complete data signing and signature verification without using certificates, thereby effectively reducing dependence on third-party certification centers, greatly reducing application and verification links, greatly reducing the complexity of key management, and reducing user cost investment.

[0125] S27, generating second ciphertext information;

[0126] The server encrypts the user private key and the random number with the session key to obtain the second ciphertext information; and sends the second ciphertext information to the client.

[0127] S28, decrypting the second ciphertext information;

[0128] After receiving the second ciphertext information, the client uses the session key to decrypt the second ciphertext information to obtain a decrypted random number and a decrypted user private key.

[0129] S29, verify the random number;

[0130] The client verifies the decrypted random number with the locally stored random number (i.e., the random number used to generate the session key). If the two are consistent, it means that the second ciphertext information has not been tampered with, and the decrypted user private key is consistent with the user key generated by the server.

[0131] S2A. Get the user's private key.

[0132] The client stores the user's private key (i.e. the decrypted user's private key, the plain text of the user's private key).

[0133] In some embodiments, after storing the user private key, it is also necessary to collect the second voice information so that the server can extract the voiceprint feature from the second voice information as the pre-stored voiceprint feature. The specific implementation method is as follows:

[0134] Display the third text information to the user; collect the second voice information when the user reads the third text information; determine whether the fourth text information recognized from the second voice information is the same as the third text information; if they are the same, send the second voice information to the server, so that the server extracts the voiceprint feature from the second voice information as the pre-stored voiceprint feature.

[0135] The third text information may be randomly generated by the client, or may be sent by the server to the client, without any specific limitation.

[0136] After the server obtains the pre-stored voiceprint features, when the user needs to perform identity authentication in the process of handling business, the client can collect the first voice information, and then recognize the first voice information through voice recognition technology to obtain the corresponding second text information; after that, it is determined whether the first text information is consistent with the second text information. If they are consistent, it means that the user correctly reads the first text information displayed by the client, and the first voice information and the verification result are signed with the user private key distributed by the server to the user to obtain the signature data.

[0137] In addition, the signature data may also include user identification, timestamp, etc. The server can use the timestamp to determine whether the signature data has a timeout reception problem, thereby improving the data's tamper-proofness. If so, it can be determined that the signature data is unsafe.

[0138] It should be noted that the above steps 102 and 103 can be executed synchronously or asynchronously, and there is no specific limitation. At present, in order to improve the authentication efficiency of the server, after determining that the static biometric information is verified, it is also possible to determine whether the second text information corresponding to the first voice information is consistent with the first text information. This is equivalent to allowing the server to perform identity authentication only after the client verifies both the static biometric information and the second text information, thereby avoiding the failure of the static biometric information verification, which causes the server to fail in identity authentication and unnecessary interactions between the client and the server, and unnecessary authentication processes on the server.

[0139] Step 104: Send the user identity data carrying the verification result, the first voice information and the signature data to the server, so that the server can verify the signature data using the user public key corresponding to the user private key, determine the similarity between the voiceprint feature in the first voice information and the pre-stored voiceprint feature, and authenticate the user's identity based on the similarity and the verification result.

[0140] If the signature data also includes user ID, timestamp, etc., the user identity data should also include user ID, timestamp, etc.

[0141] For example, after the client sends the above-mentioned user identity data to the server, the server can use the user's public key to verify the signature data. If the verification passes, the voiceprint feature is extracted from the first voice information, and the similarity between the voiceprint feature of the first voice information and the voiceprint feature pre-stored on the server is calculated. If the similarity is greater than the preset value and the verification result of the static biometric information is passed, the user identity authentication is determined to be passed, otherwise it is determined that the user identity authentication has failed.

[0142] In the embodiment provided by the present invention, since the static biometric information is a biometric feature that exists in the user itself and will not change, it has unique certainty, and the first voice information collected at the same time is collected by letting the user correctly read the first text information displayed on the client, it can ensure that the static biometric information and the first voice information are from the same person and are a living biological body; when authenticating the user, the static biometric information verification is completed on the client, and the voiceprint information authentication of the first voice information is completed on the server, and the authentication results of the two are combined to authenticate the user's identity, thereby realizing the use of multiple biometric features (voiceprint is also a biometric feature) authentication, greatly improving the security factor of authentication, ensuring the real-time and reliability of the authentication result, and since the static biometric information is authenticated on the client side, it can also avoid the leakage of the user's personal privacy data, reduce the amount of data transmission, and improve the verification efficiency.

[0143] Based on the same inventive concept, an embodiment of the present invention provides an identity authentication method applied to the server, see Figure 4 The method includes:

[0144] Step 401: receiving user identity data sent by the client; wherein the user identity data carries the verification result of the static biometric information of the user verified by the client, the first voice information of the user, and the signature data of the user; the static biometric information is used to characterize the biometric features of the user that exist and will not change; the first voice information is collected when the user reads aloud the first text information displayed by the client, and the second text information recognized from the first voice information is consistent with the first text information; the signature data is obtained by signing the verification result of the first voice information and the static biometric information by the client using the user's private key;

[0145] Step 402: Verify the signature data with the user public key corresponding to the user private key to determine whether the user identity data has been tampered with; if the signature data verification passes, it is determined that the user identity data has not been tampered with, and the voiceprint feature is extracted from the first voice information;

[0146] Step 403: Calculate the similarity between the voiceprint feature of the first voice information and the pre-stored voiceprint feature; if the similarity is greater than a preset value and the verification result of the static biometric information is passed, it is determined that the user's identity is authenticated.

[0147] In some embodiments, before receiving the user identity data sent by the client, the method further includes:

[0148] Receive a private key distribution request sent by the client; wherein the private key distribution request carries the user identification and first ciphertext information of the user, wherein the user identification is obtained by encrypting and calculating the unique identification of the terminal and the unique identification of the user through the SM3 algorithm after the client determines that the terminal supports biometric authentication; the unique identification of the user is generated by the server based on the identity information provided by the user when registering; the first ciphertext information is obtained by the client using the master public key to encrypt the session key, random number and user identification used for communication between the client and the server; the session key is a symmetric key generated by the client based on the random number; the master public key is a key issued by the server to all users;

[0149] Decrypt the first ciphertext information using a master private key corresponding to the master public key to obtain the session key, the random number and the decrypted user identifier;

[0150] Determine whether the user identification is the same as the decrypted user identification, and if so, generate the user private key based on the user identification and the configuration parameters of the server; wherein the configuration parameters are used to characterize the environmental characteristics of the server;

[0151] Encrypt the user private key and the random number using the session key to obtain second ciphertext information;

[0152] The second ciphertext information is sent to the client.

[0153] In some other embodiments, after sending the second ciphertext information to the client, the method further includes:

[0154] receiving a second voice message sent by the client; wherein the second voice message is collected by the client when the user reads aloud the third text message displayed by the client, and the fourth text message recognized from the second voice message is the same as the third text message;

[0155] A voiceprint feature is extracted from the second voice information and stored in the server as a pre-stored biometric feature of the user.

[0156] See also Figure 5 A schematic diagram of an interaction for user identity authentication provided by an embodiment of the present invention.

[0157] Before authenticating the user, the user must enable biometric authentication so that the server can generate the user's pre-stored voiceprint information.

[0158] S31: Whether biometric authentication is supported;

[0159] The user initiates enabling biometric authentication, and the client determines whether the terminal supports biometric authentication. If so, S32 is executed.

[0160] S32: Calculate user ID;

[0161] The client generates a user ID according to the unique ID of the terminal and the unique ID of the user.

[0162] S33: Obtain the user's private key;

[0163] The client obtains the user's private key by initiating a private key distribution process to the server. For the specific private key distribution process, refer to Figure 3 , I will not go into details here.

[0164] S34: collecting second voice information;

[0165] The client displays the third text information to the user, enables the user to read the third text information aloud, and collects voice when the user reads aloud to obtain the second voice information. The client can send the second voice information to the server, or use voice recognition technology to identify the fourth text information from the second voice information, determine whether the fourth text information is the same as the third text information, and send the second voice information to the server if they are the same.

[0166] S35: Generate pre-stored voiceprint information.

[0167] After receiving the second voice information, the server extracts the voiceprint information from the second voice information as the pre-stored voiceprint information. The server can also establish a voiceprint model based on the pre-stored voiceprint information and use the voiceprint model to verify the voiceprint of the first voice information.

[0168] When a user needs to perform identity authentication during the process of handling a certain business, it can be achieved in the following ways:

[0169] S41: Whether to enable biometric authentication;

[0170] The user initiates identity authentication, and the client determines whether the terminal has biometric authentication enabled; if enabled, the client is controlled to enable it; if enabled, S42 is executed.

[0171] S42, static biometric authentication;

[0172] The client collects the user's static biometric information, such as fingerprints, facial information, etc. The client verifies whether the static biometric information is the same as the pre-stored biometric information stored in the terminal by the client, and obtains the verification result.

[0173] S43, collecting first voice information;

[0174] The client displays the first text information to the user, enables the user to read the first text information aloud, and collects the first voice information when the user reads aloud.

[0175] S44, recognizing first voice information;

[0176] The client uses voice recognition technology to recognize the first voice information and obtains the second text information.

[0177] S45, obtaining a user ID and a user private key;

[0178] S46, generating user identity information;

[0179] The client determines whether the second text message is the same as the first text message. If they are the same, the client uses the user's private key to encrypt the first voice message, verification result, user identification, and the timestamp generated according to the current time to obtain signature data; and sends the user identity information carrying the verification result, the first voice message and the signature data to the server.

[0180] S47, signature verification;

[0181] After receiving the above user identity information, the server verifies the signature data with the user's public key, decrypts the user identity information after the verification, and obtains the decrypted first voice information, the decrypted verification result, the decrypted user identification, and the decrypted timestamp.

[0182] S48, verifying the timestamp;

[0183] The server calculates the time difference between the received time and the decrypted timestamp, and if the time difference is less than the preset duration, executes S49.

[0184] S49, verifying the user identification;

[0185] The server determines whether the decrypted user identifier is the same as the locally stored user identifier. If they are the same, S50 is executed.

[0186] S50, obtaining verification results;

[0187] The client obtains the verification result of the static biometric information (ie, the decrypted verification result).

[0188] S51, obtaining voiceprint information of first voice information;

[0189] The server obtains voiceprint information from the first voice information.

[0190] S52, verifying the voiceprint information;

[0191] The client uses the pre-stored voiceprint information stored locally to verify the voiceprint information of the first voice. If the voiceprint information of the first voice is verified successfully, and the verification result of the static biometric information indicates that the static biometric information is also verified successfully, information indicating that the user identity authentication is successful is generated and sent to the client; otherwise, information indicating that the user identity authentication is unsuccessful is generated and sent to the client.

[0192] S53. Authentication completed.

[0193] The client receives the user authentication result information sent by the server and completes the authentication.

[0194] Based on the same inventive concept, an embodiment of the present invention provides an identity authentication device, which is applied to a client. The specific implementation of the identity authentication method of the device can refer to the description of the client side method embodiment part, and the repeated parts will not be repeated. Please refer to Figure 6 , the device comprises:

[0195] The collecting unit 601 is used to collect static biometric information and first voice information of the user; wherein the static biometric information is used to represent the biometric characteristics of the user that exist and will not change; the first voice information is collected when the user reads aloud the first text information displayed by the client;

[0196] A verification unit 602, configured to verify whether the static biometric information is identical to the pre-stored biometric information stored in the terminal by the client, and obtain a verification result;

[0197] The processing unit 603 is used to determine whether the second text information corresponding to the first voice information is consistent with the first text information, and if they are consistent, use the user private key of the user to sign the first voice information and the verification result to obtain signature data;

[0198] The sending unit 604 is used to send the user identity data carrying the verification result, the first voice information and the signature data to the server, so that the server uses the user public key corresponding to the user private key to verify the signature data, determine the similarity between the voiceprint feature in the first voice information and the pre-stored voiceprint feature, and authenticate the identity of the user based on the similarity and the verification result.

[0199] In a possible implementation manner, the processing unit 603 is further configured to:

[0200] Before obtaining the signature data, after the user logs into the client, detecting whether the terminal supports biometric authentication;

[0201] If it is determined that the terminal supports biometric authentication, encrypt and calculate the unique identifier of the terminal and the unique identifier of the user through the SM3 algorithm to obtain and store the user identifier of the user; the unique identifier of the user is generated by the server based on the identity information provided by the user during registration;

[0202] The session key, the random number and the user identifier used by the client to communicate with the server are encrypted with the master public key to obtain the first ciphertext information; wherein the session key is a symmetric key generated by the client based on the random number; the master public key is a key issued by the server to all users;

[0203] Sending a private key distribution request carrying the user identifier and the first ciphertext information to the server; the private key distribution request is used to request the server to distribute the user private key to the user;

[0204] Receiving second ciphertext information sent by the server; wherein the second ciphertext information is obtained by the server encrypting the user private key and the random number with the session key;

[0205] Decrypt the second ciphertext information using the session key to obtain a decrypted random number and the user private key;

[0206] Determine whether the decrypted random number is the same as the random number stored locally, and if they are the same, store the user private key.

[0207] In a possible implementation manner, the processing unit 603 is further configured to:

[0208] After storing the user private key, displaying third text information to the user;

[0209] collecting second voice information when the user reads aloud the third text information;

[0210] determining whether the fourth text information recognized from the second voice information is the same as the third text information;

[0211] If they are the same, the second voice information is sent to the server, so that the server extracts the voiceprint feature from the second voice information as the pre-stored voiceprint feature.

[0212] Based on the same inventive concept, an embodiment of the present invention provides an identity authentication device, which is applied to the server. The specific implementation of the identity authentication method of the device can refer to the description of the client side method embodiment part, and the repeated parts will not be repeated. Please refer to Figure 7 , the device comprises:

[0213] The receiving unit 701 is used to receive user identity data sent by a client; wherein the user identity data carries the verification result of the static biometric information of the user verified by the client, the first voice information of the user, and the signature data; the static biometric information is used to characterize the biometric characteristics of the user that exist and will not change; the first voice information is collected when the user reads aloud the first text information displayed by the client, and the second text information recognized from the first voice information is consistent with the first text information; the signature data is obtained by the client signing the verification result of the first voice information and the static biometric information with the user's private key;

[0214] The signature verification unit 702 is used to verify the signature data with the user public key corresponding to the user private key to determine whether the user identity data has been tampered with; if the signature data passes the signature verification, it is determined that the user identity data has not been tampered with, and a voiceprint feature is extracted from the first voice information;

[0215] The authentication unit 703 is used to calculate the similarity between the voiceprint feature of the first voice information and the pre-stored voiceprint feature; if the similarity is greater than a preset value and the verification result of the static biometric information is passed, it is determined that the identity of the user is authenticated.

[0216] In a possible implementation manner, the apparatus further includes a private key distribution unit 704, wherein the private key distribution unit 704 is configured to:

[0217] Before receiving the user identity data sent by the client, a private key distribution request sent by the client is received; wherein the private key distribution request carries the user identification and first ciphertext information of the user, wherein the user identification is obtained by encrypting and calculating the unique identification of the terminal and the unique identification of the user through the SM3 algorithm after the client determines that the terminal supports biometric authentication; the unique identification of the user is generated by the server based on the identity information provided by the user when registering; the first ciphertext information is obtained by the client using the master public key to encrypt the session key, random number and user identification used for communication between the client and the server; the session key is a symmetric key generated by the client based on the random number; the master public key is a key issued by the server to all users;

[0218] Decrypt the first ciphertext information using a master private key corresponding to the master public key to obtain the session key, the random number and the decrypted user identifier;

[0219] Determine whether the user identification is the same as the decrypted user identification, and if so, generate the user private key based on the user identification and the configuration parameters of the server; wherein the configuration parameters are used to characterize the environmental characteristics of the server;

[0220] Encrypt the user private key and the random number using the session key to obtain second ciphertext information;

[0221] The second ciphertext information is sent to the client.

[0222] In a possible implementation manner, the private key distribution unit 704 is further configured to:

[0223] After sending the second ciphertext information to the client, receiving a second voice message sent by the client; wherein the second voice message is collected by the client when the user reads aloud the third text message displayed by the client, and the fourth text message recognized from the second voice message is the same as the third text message;

[0224] A voiceprint feature is extracted from the second voice information and stored in the server as a pre-stored biometric feature of the user.

[0225] It should be noted that the division of units in the embodiments of the present application is schematic and is only a logical function division. There may be other division methods in actual implementation. In addition, each functional unit in each embodiment of the present application may be integrated into a processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0226] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a processor-readable storage medium. Based on this understanding, the technical solution of the present application is essentially or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions to enable a computer device (which can be a personal computer, server, or network device, etc.) or a processor (processor) to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (Read-Only Memory, ROM), random access memory (Random Access Memory, RAM), disk or optical disk and other media that can store program codes.

[0227] It should be noted here that the above-mentioned device provided in the embodiment of the present invention can implement all the method steps implemented in the above-mentioned method embodiment, and can achieve the same technical effect. The parts and beneficial effects that are the same as the method embodiment in this embodiment will not be described in detail here.

[0228] Based on the same inventive concept, an embodiment of the present invention provides an identity authentication device, comprising: at least one processor, and

[0229] a memory coupled to the at least one processor;

[0230] The memory stores instructions that can be executed by the at least one processor, and the at least one processor executes the above-mentioned client-side or server-side identity authentication method by executing the instructions stored in the memory.

[0231] Based on the same inventive concept, an embodiment of the present invention further provides a readable storage medium, including:

[0232] Memory,

[0233] The memory is used to store instructions. When the instructions are executed by the processor, the device including the readable storage medium completes the identity authentication method on the client side or the server side as described above.

[0234] The readable storage medium may be any available medium or data storage device that the processor can access, including volatile memory or non-volatile memory, or may include both volatile memory and non-volatile memory. As an example and not limitation, non-volatile memory may include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM) or flash memory, solid state disk (SSD), magnetic storage (e.g., floppy disk, hard disk, magnetic tape, magneto-optical disc (MO), etc.), optical storage (e.g., CD, DVD, BD, HVD, etc.). Volatile memory may include random access memory (RAM), which may act as an external cache memory. By way of example and not limitation, RAM is available in a variety of forms, such as dynamic random access memory (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDR SDRAM), enhanced synchronous DRAM (ESDRAM), and synchronous link DRAM (SLDRAM). The memory devices of the disclosed aspects are intended to include, but are not limited to, these and other suitable types of memory.

[0235] Those skilled in the art will appreciate that the embodiments of the present invention may be provided as methods, systems, or program products. Therefore, the embodiments of the present invention may be in the form of complete hardware embodiments, complete software embodiments, or embodiments combining software and hardware. Moreover, the embodiments of the present invention may be in the form of machine program products implemented on one or more readable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer / processor available program codes.

[0236] The embodiments of the present invention are described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to the embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0237] These program instructions may also be stored in a readable memory that can direct a computer or other programmable data processing device to work in a specific manner, so that the instructions stored in the readable memory produce a manufactured product including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0238] These program instructions may also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer / processor-implemented process, thereby providing instructions executed on the computer / processor or other programmable device for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0239] Obviously, those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include these modifications and variations.

Claims

1. A method for identity authentication, applied to a client, wherein the client is deployed in a terminal, characterized in that: include: Collecting static biometric information and first voice information of the user; wherein the static biometric information is used to characterize the biometric features of the user that exist and will not change; and the first voice information is collected when the user reads aloud the first text information displayed by the client; Verifying whether the static biometric information is identical to the pre-stored biometric information stored in the terminal by the client, and obtaining a verification result; Determine whether the second text information corresponding to the first voice information is consistent with the first text information, and if they are consistent, use the user private key of the user to sign the first voice information and the verification result to obtain signature data; The user identity data carrying the verification result, the first voice information and the signature data is sent to the server, so that the server verifies the signature data using the user public key corresponding to the user private key, determines the similarity between the voiceprint feature in the first voice information and the pre-stored voiceprint feature, and authenticates the identity of the user based on the similarity and the verification result.

2. The method according to claim 1, characterized in that Before obtaining the signature data, the method further includes: After the user logs in to the client, detecting whether the terminal supports biometric authentication; If it is determined that the terminal supports biometric authentication, encrypt and calculate the unique identifier of the terminal and the unique identifier of the user through the SM3 algorithm to obtain and store the user identifier of the user; the unique identifier of the user is generated by the server based on the identity information provided by the user during registration; The session key, the random number and the user identifier used by the client to communicate with the server are encrypted with the master public key to obtain the first ciphertext information; wherein the session key is a symmetric key generated by the client based on the random number; the master public key is a key issued by the server to all users; Sending a private key distribution request carrying the user identifier and the first ciphertext information to the server; the private key distribution request is used to request the server to distribute the user private key to the user; Receiving second ciphertext information sent by the server; wherein the second ciphertext information is obtained by the server encrypting the user private key and the random number with the session key; Decrypt the second ciphertext information using the session key to obtain a decrypted random number and the user private key; Determine whether the decrypted random number is the same as the random number stored locally, and if they are the same, store the user private key.

3. The method according to claim 2, characterized in that After storing the user private key, it also includes: Displaying third text information to the user; collecting second voice information when the user reads aloud the third text information; determining whether the fourth text information recognized from the second voice information is the same as the third text information; If they are the same, the second voice information is sent to the server, so that the server extracts the voiceprint feature from the second voice information as the pre-stored voiceprint feature.

4. A method of identity authentication, applied to a server, characterized in that: include: Receive user identity data sent by a client; wherein the user identity data carries the verification result of the static biometric information of the user verified by the client, the first voice information of the user, and the signature data; the static biometric information is used to characterize the biometric characteristics of the user that exist and will not change; the first voice information is collected when the user reads aloud the first text information displayed by the client, and the second text information recognized from the first voice information is consistent with the first text information; the signature data is obtained by the client signing the verification result of the first voice information and the static biometric information with the user's private key; Verify the signature data using the user public key corresponding to the user private key to determine whether the user identity data has been tampered with; If the signature data is verified, it is determined that the user identity data has not been tampered with, and a voiceprint feature is extracted from the first voice information; Calculating the similarity between the voiceprint feature of the first voice information and the pre-stored voiceprint feature; If the similarity is greater than a preset value and the verification result of the static biometric information is passed, it is determined that the identity of the user is authenticated.

5. The method according to claim 4, characterized in that Before receiving the user identity data sent by the client, it also includes: Receive a private key distribution request sent by the client; wherein the private key distribution request carries the user identification and first ciphertext information of the user, wherein the user identification is obtained by encrypting and calculating the unique identification of the terminal and the unique identification of the user through the SM3 algorithm after the client determines that the terminal supports biometric authentication; the unique identification of the user is generated by the server based on the identity information provided by the user when registering; the first ciphertext information is obtained by the client using the master public key to encrypt the session key, random number and user identification used for communication between the client and the server; the session key is a symmetric key generated by the client based on the random number; the master public key is a key issued by the server to all users; Decrypt the first ciphertext information using a master private key corresponding to the master public key to obtain the session key, the random number and the decrypted user identifier; Determine whether the user identification is the same as the decrypted user identification, and if so, generate the user private key based on the user identification and the configuration parameters of the server; wherein the configuration parameters are used to characterize the environmental characteristics of the server; Encrypt the user private key and the random number using the session key to obtain second ciphertext information; The second ciphertext information is sent to the client.

6. The method according to claim 5, characterized in that After sending the second ciphertext information to the client, the method further includes: receiving a second voice message sent by the client; wherein the second voice message is collected by the client when the user reads aloud the third text message displayed by the client, and the fourth text message recognized from the second voice message is the same as the third text message; A voiceprint feature is extracted from the second voice information and stored in the server as a pre-stored biometric feature of the user.

7. An identity authentication device, applied to a client, wherein the client is deployed in a terminal, characterized in that: include: A collection unit, configured to collect static biometric information and first voice information of a user; wherein the static biometric information is used to characterize a biometric feature of the user that exists and will not change; and the first voice information is collected when the user reads aloud the first text information displayed by the client; a verification unit, used to verify whether the static biometric information is identical to the pre-stored biometric information stored in the terminal by the client, and obtain a verification result; a processing unit, configured to determine whether the second text information corresponding to the first voice information is consistent with the first text information, and if consistent, to sign the first voice information and the verification result with the user's private key to obtain signature data; The sending unit is used to send the user identity data carrying the verification result, the first voice information and the signature data to the server; after the server verifies the signature data using the user public key corresponding to the user private key, it determines the similarity between the voiceprint feature in the first voice information and the pre-stored voiceprint feature, and authenticates the identity of the user based on the similarity and the verification result.

8. An identity authentication device, applied to a server, characterized in that: include: A receiving unit, configured to receive user identity data sent by a client; wherein the user identity data carries a verification result of the static biometric information of the user verified by the client, the first voice information of the user, and signature data; the static biometric information is used to characterize a biometric feature of the user that exists and will not change; the first voice information is collected when the user reads aloud the first text information displayed by the client, and the second text information recognized from the first voice information is consistent with the first text information; the signature data is obtained by the client signing the verification result of the first voice information and the static biometric information with the user's private key; a signature verification unit, configured to verify the signature data using a user public key corresponding to the user private key to determine whether the user identity data has been tampered with; if the signature data passes the signature verification, it is determined that the user identity data has not been tampered with, and a voiceprint feature is extracted from the first voice information; The authentication unit is used to calculate the similarity between the voiceprint feature of the first voice information and the pre-stored voiceprint feature; if the similarity is greater than a preset value and the verification result of the static biometric information is passed, it is determined that the identity of the user has passed the authentication.

9. An identity authentication device, characterized in that: include: at least one processor, and a memory coupled to the at least one processor; The memory stores instructions that can be executed by the at least one processor, and the at least one processor executes the method according to any one of claims 1 to 6 by executing the instructions stored in the memory.

10. A readable storage medium, characterized in that: Including memory, The memory is used to store instructions. When the instructions are executed by the processor, the device including the readable storage medium implements the method according to any one of claims 1 to 6.

Images